In the comments we were able to clarify that ...
I [zen] only need a way to protect the page without having to have credentials for each user or any login. Another option that I thought was to make a POST message every time they click on the link, and my page will only allow them if the POST contains a specific key. [...]
Since the detection of fraudulent access is not a problem, I would suggest that you simply check the http referer for a list of approved sites (and / or pages). It is non-invasive for approved sites and does not provide more reliable protection than the fixed post-token that you are checking.
In PHP, the referrer is in the variable $_SERVER['HTTP_REFERER'] , if any.
source share